Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ubcms0W0F65Qxxtkduyfzy8iMYU.roa
File: ubcms0W0F65Qxxtkduyfzy8iMYU.roa (raw, json)
Hash identifier: YI5QeEPBSNs+aDhjrxef+HGEogo8EdAbgTGBFb6k/ug=
Subject key identifier: B9:B7:26:B3:45:B4:17:AE:50:C7:1B:64:76:EC:9F:CF:2F:22:31:85
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8D5A3CDCCFE8CF75B0ED7D39FB89E381
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ubcms0W0F65Qxxtkduyfzy8iMYU.roa
Signing time: Sat 30 Mar 2024 03:14:45 +0000
ROA not before: Sat 30 Mar 2024 03:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8d:5a:3c:dc:cf:e8:cf:75:b0:ed:7d:39:fb:89:e3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 03:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b726b345b417ae50c71b6476ec9fcf2f223185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:a7:c8:54:cd:7e:75:76:b3:8d:cc:c7:a3:
eb:5e:c5:db:e7:a6:9c:e8:73:88:2f:58:d7:6e:30:
97:ac:de:3e:e8:ca:a5:dc:5f:31:e3:be:0f:0a:69:
e2:56:9a:90:a7:75:6f:2f:d2:7f:61:47:c7:d0:75:
cd:12:6d:36:0b:5f:aa:8b:0a:90:d8:d6:18:fe:e6:
e7:9d:48:70:0a:7a:b9:c8:6f:9f:db:05:af:8b:29:
8f:01:87:e4:24:59:e8:59:db:a0:73:4b:f4:e3:fd:
0e:74:48:9d:e1:70:4f:58:c1:43:a8:09:18:94:0c:
d2:cb:ff:ec:58:42:42:88:9c:04:af:0e:79:43:fa:
3a:83:90:0b:4c:5f:35:08:b4:b8:32:8e:76:75:94:
39:40:5f:df:be:5e:8d:35:5b:96:92:9a:cb:5e:cd:
8f:0d:85:d3:dd:0e:ad:74:c1:9e:cc:1b:b8:c8:80:
0b:8f:aa:cf:fa:5f:1f:a0:62:6b:b5:f0:20:08:67:
e9:24:b5:c3:b4:be:ac:9b:8f:4b:48:54:ff:b8:84:
01:d5:ff:6f:53:70:f3:d8:d2:31:cd:ce:6d:d7:52:
9b:30:00:94:77:a3:88:ed:db:b8:80:0e:34:42:c8:
fe:b3:b6:75:f9:df:db:69:78:f7:09:84:af:8b:92:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:26:B3:45:B4:17:AE:50:C7:1B:64:76:EC:9F:CF:2F:22:31:85
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ubcms0W0F65Qxxtkduyfzy8iMYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:89:48:29:d3:ac:b0:03:8f:9c:8f:e8:56:18:43:28:8b:bf:
fd:e4:67:4c:81:fc:59:ef:69:04:79:e6:db:5b:8f:f7:eb:c5:
23:ce:46:5b:0c:3d:94:2e:c7:d9:45:a7:82:95:86:07:90:87:
ce:0f:35:3b:56:82:00:c1:b1:a9:67:4b:91:60:06:1a:5c:8c:
42:d3:33:29:14:38:a6:03:37:84:c5:6b:45:63:10:ff:0d:08:
a4:fc:9b:bd:b5:46:37:1e:3e:f2:05:ff:5b:8b:bf:43:e1:06:
4f:ed:de:9f:85:10:fa:5e:00:6c:aa:13:64:07:51:ec:d2:e7:
9d:1e:f4:be:a6:d7:9b:7b:de:22:b0:ec:e3:01:d5:8b:0c:ac:
fd:70:7a:d5:43:2e:54:82:f4:72:2b:c7:4c:d3:1a:f3:bb:f9:
4c:33:92:b9:c6:cc:39:8b:dc:dd:4d:40:e5:2c:60:af:01:79:
5d:91:8d:c7:13:bd:d6:db:23:1c:df:29:da:e2:68:f5:c2:b3:
df:1a:d3:8d:7c:3d:11:ea:65:8b:b4:1b:05:0a:12:a0:be:da:
43:39:ae:5b:bc:e5:ec:18:88:86:41:1a:eb:5d:e9:da:0d:1e:
6e:13:d2:f7:af:7a:cf:cd:d6:ce:61:86:79:09:d3:a4:9b:da:
47:70:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org